Zero-downtime schema and data migration discipline — expand → migrate → contract, never destructive in the release that ships the code, backfills as jobs, every step reversible. INVOKE PROACTIVELY when creating or editing a migration in any framework, writing ALTER TABLE / index / enum / constraint changes, planning a…
Build-time security discipline — threat-model before controls, Always/Ask-First/Never boundary tiers, SSRF, supply chain, LLM/agent security, privacy. INVOKE PROACTIVELY when building anything touching auth, user data, uploads, outbound fetches, dependencies, or model output — even when nobody says "security". The…
Surface the riskiest parts of the current diff so a reviewer knows where to look hardest — one inline pass on small diffs, parallel review lenses with adversarial synthesis on substantial ones. INVOKE PROACTIVELY whenever a change is finished and about to be handed off, reviewed, or shipped. It points attention …
SEO for anything served as a web page — the plumbing (templates, routes, redirects, metadata, JSON-LD, sitemaps, robots.txt) and the prose (posts, guides, landing copy, docs) so pages rank and get cited by AI answer engines. INVOKE when creating or editing page templates (HTML/JSX/TSX/Vue/Svelte/Astro), routes…
Test-driven development — the red-green-refactor discipline for code that's correct by design, not by accident. INVOKE PROACTIVELY whenever writing or changing code, fixing a bug, adding or structuring tests, or choosing what to mock — even when nobody says "TDD" or "tests". (Tests are code held to…
The ticket-as-control-plane rulebook — the single home for the tracker-operations contract, tracker resolution, the type/priority taxonomy, human-only trigger authorization, derived status, and trust boundaries. INVOKE when reading or writing tickets in a queue-driven flow, resolving a repo's tracker, or deciding…
Turn one raw ticket into an implementation-ready spec — or ask the smallest unblocking question — without writing production code. INVOKE when specifying, scoping, or triaging a ticket from any tracker, when a ticket carries the ready-for-spec trigger, or when /sonu:factory routes a spec pass. Not backlog-wide…
Web typography — typeface choice and pairing, variable fonts and OpenType features, type scales, line-height, letter-spacing, measure, wrapping, truncation, underlines, tabular numbers, iOS input zoom. INVOKE PROACTIVELY when styling or reviewing anything that renders text. The words themselves: [[ux-writing]]…
Design-engineering details that make an interface feel polished — border radius, optical alignment, shadows and elevation, animations and micro-interactions, press feedback, icons. INVOKE PROACTIVELY when building or reviewing UI components, adding motion or hover/active states, or when the user says "make it feel…
UX writing and interface copy — voice and tone, button and link labels, error messages, settings labels, empty states, placeholders. INVOKE PROACTIVELY when writing or reviewing any user-facing interface text — even when nobody says "copy" or "microcopy". How copy renders: [[typography]]; error markup and…